ATTACK PATHS INTO VMS IN THE CLOUD

Summary from the TLDR InfoSec newsletter

A comprehensive overview of different attacks against VM services from AWS, Azure, and GCP. The overview examines six classes of attack vectors and provides a scenario, overview, example attack, and mitigation for each attack. The attack vectors are vulnerability exploitation, startup script manipulation, SSH key push, direct code execution, SSH over middleware, and serial console access.